DEV Community

#cybersecurityarticle

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Kubernetes RBAC escalate and bind verbs remove the usual guardrails

Kubernetes RBAC escalate and bind verbs remove the usual guardrails

Comments
4 min read
Tailscale device tags are identities, not deployment labels

Tailscale device tags are identities, not deployment labels

Comments
3 min read
Caddy forward_auth needs a backend the internet cannot bypass

Caddy forward_auth needs a backend the internet cannot bypass

Comments
3 min read
S3 Object Lock governance mode still has an escape hatch

S3 Object Lock governance mode still has an escape hatch

Comments
3 min read
A Kubernetes subPath secret mount can outlive credential rotation

A Kubernetes subPath secret mount can outlive credential rotation

Comments
3 min read
The OpenTelemetry memory limiter cannot save an exhausted exporter queue

The OpenTelemetry memory limiter cannot save an exhausted exporter queue

Comments
3 min read
Nginx optional_no_ca requests a certificate without validating its issuer

Nginx optional_no_ca requests a certificate without validating its issuer

Comments
3 min read
GitLab protected environments need the job's environment declaration

GitLab protected environments need the job's environment declaration

Comments
3 min read
Azure user delegation SAS improves revocation, within cache limits

Azure user delegation SAS improves revocation, within cache limits

Comments
3 min read
Vault response wrapping is a delivery token, not durable secret storage

Vault response wrapping is a delivery token, not durable secret storage

Comments
3 min read
Federation trust chains need limits at every hop

Federation trust chains need limits at every hop

Comments
3 min read
IMA appraisal covers files, not the whole trust path

IMA appraisal covers files, not the whole trust path

Comments
2 min read
GitLab's second perfect score in nine days: why anyone who patched on 12 October is still exposed

GitLab's second perfect score in nine days: why anyone who patched on 12 October is still exposed

Comments
4 min read
PHP2Shell: what 884,000 unpatched hosts mean for the PHP runtime you forgot you were running

PHP2Shell: what 884,000 unpatched hosts mean for the PHP runtime you forgot you were running

Comments
4 min read
Ninety-four minutes: how a GitHub release page became a credential thief

Ninety-four minutes: how a GitHub release page became a credential thief

Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.